IN THE CLAIMS : 

Please amend claims 1-23, and add new claim 31, as follows. 

1. (Currently Amended) A method for performing an address update in a 
communication system, the method comprising the steps of : 

[-] indicating that an address update process needs to be performed, wherein 
location-related information about a mobile node is transmitted to a correspondent node 
of the mobile node if the address update process is performed; 

[-} authenticating the correspondent node in response to the indicating^step, 
authenticating the correspondent node, the authenticating step— yielding identity 
information about the correspondent node; 

[-] based on the identity information, determining whether the address update 
process is to be carried ou t based on the identity information ; and 

[-] performing the address update process when the determining step-indicates that 
the address update process is to be carried out and omitting the address update process 
when the determining step-indicates that the address update process is not to be carried 
out. 

2. (Currently Amended) A method according to claim 1, wherein the performing 
step-performs the address update for optimizing routing between the mobile node and the 
correspondent node. 



3. (Currently Amended) A method according to claim 1, further comprising a step 
ef-storing security policy data in the mobile node, the security policy data indicating a set 
of trusted parties. 

4. (Currently Amended) A method according to claim 3, wherein the determining 
step-comprises comparing the identity information with the security policy data stored in 
the mobile node. 

5. (Currently Amended) A method according to claim 4, wherein the performing 
step-is carried out in response to the comparing step-when the comparing step-indicates 
that the correspondent node belongs to the set of trusted parties. 

6. (Currently Amended) A method according to claim 4, wherein the determining 
step-comprises prompting a user of the mobile node to make a decision when the 
comparing step-indicates that the correspondent node fails to belong to the set of trusted 
parties, wherein the prompting step-comprises informing the user about the identity 
information. 



7. (Currently Amended) A method according to claim 1, wherein the indicating 
step-comprises indicating that the address update process comprises a binding update 
process according to a Mobile IP protocol. 

8. (Currently Amended) A method according to claim 7, wherein the indicating 
step-is performed in response to a predetermined event. 

9. (Currently Amended) A method according to claim 8, wherein the indicating 
step-comprises responding to the predetermined event comprising reception of a packet 
routed via a home agent of the mobile node. 

10. (Currently Amended) A method according to claim 8, wherein the indicating 
step-comprises responding to the predetermined event comprising reception of a new 
address for the mobile node. 

11. (Currently Amended) A method according to claim 3, wherein the storing step 
comprises storing the security policy data comprising high-level identifiers of trusted 
correspondent nodes. 
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12. (Currently Amended) A method according to claim 3, wherein the storing step 
comprises storing the security policy data comprising rules for deciding whether the 
identity information represents a trusted correspondent node. 

13. (Currently Amended) A method according to claim 1, wherein the 
authenticating step-comprises authenticating the correspondent node by means of a 
certificate-based authentication protocol. 

14. (Currently Amended) A method according to claim 13, wherein the 
authenticating step — comprises authenticating by means of the certificate-based 
authentication protocol comprising an Internet Key Exchange protocol. 

15. (Currently Amended) A method according to claim 13, wherein the 
authenticating step — comprises authenticating by means of the certificate-based 
authentication protocol comprising a Transport Layer Security protocol. 

16. (Currently Amended) A method according to claim 1, wherein the 
authenticating step— comprises authenticating by means of the authenticating step 
comprising certifying the identity information cryptographically. 
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17. (Currently Amended) A mobile node for a communication system, the mobile 
node comprising: 

indicator means for giving unit configured to give an indication when an address 
update process needs to be performed, location-related information about a mobile node 
being notified to a correspondent node of the mobile node if the address update process is 
performed; 

authentication mean s for authenticating unit configured to authenticate the 
correspondent node, the authentication means unit being responsive to the indicator 
means - unit and configured to yield y ielding identity information about the correspondent 
node; 

determination^tteans unit , responsive to the authentication means, for determining 
configured to determine w hether the address update process is to be performed; and 

address update means unit , responsive to the determination-mean s unit , for 
carrying configured to carry out the address update process. 

18. (Currently Amended) A mobile node according to claim 17, further 
comprising binding means for maintaining unit configured to maintain a binding, the 
binding being an association of a home address of the mobile node with a care-of address 
of the mobile node, 

wherein the correspondent node is informed of the binding when the address 
update process is performed. 
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19. (Currently Amended) A mobile node according to claim 17, wherein 
authentication means- unit comprises a certificate-based authentication protocol. 

20. (Currently Amended) A mobile node according to claim 17, wherein the 
authentication means unit comprises a ©domain Nname Ssystem-based protocol for 
obtaining the identity information. 

21. (Currently Amended) A mobile node according to claim 17, wherein the 
determining means determination unit comprises a security policy database, the 
determination means - unit being configured to determine, by means of the security policy 
database, whether the address update means - unit can be activated without consulting a 
user of the mobile node. 

22. (Currently Amended) A mobile node according to claim 21, wherein the 
determining mean s determination unit further comprise user interaction m e ans unit f or 
promptin g configured to prompt the user to make a decision on whether the address 
update process is to be performed. 
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23. (Currently Amended) A mobile node according to claim 22, wherein the user 
interaction mean s unit is are configured to indicate the identity information to the user, 
the identity information comprising a high-level identifier of the correspondent node. 

24. (Original) A mobile node according to claim 21, wherein the security policy 
database comprises identifiers of trusted correspondent nodes. 

25. (Original) A mobile node according to claim 21, wherein the security policy 
database comprises rules for determining whether a given identifier represents a trusted 
correspondent node. 

26. (Original) A system for performing address updates in a communication 
system comprising: 

indicator means for giving an indication when an address update process needs to 
be performed, location-related information about a mobile node being notified to a 
correspondent node of the mobile node if the address update process is performed; 

authentication means for authenticating the correspondent node, the authentication 
means being responsive to the indicator means and yielding identity information about 
the correspondent node; 

determination means, responsive to the authentication means, for determining 
whether the address update process is to be performed; and 
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address update means, responsive to the determination means, for carrying out the 
address update process. 

27. (Original) A system according to claim 26, wherein the authentication means 
are located in the mobile node. 

28. (Original) A system according to claim 26, wherein the authentication means 
are located in a home agent of the mobile node. 

29. (Original) A system according to claim 26, wherein the address update means 
are located in a home agent of the mobile node. 

30. (Original) A system according to claim 28, wherein the determination means 
are located in the home agent of the mobile node. 

31. (New) An apparatus for performing address updates in a communication 
system, comprising: 

indicator means for giving an indication when an address update process needs to 
be performed, location-related information about a mobile node being notified to a 
correspondent node of the mobile node if the address update process is performed; 
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authentication means for authenticating the correspondent node, the authentication 
means being responsive to the indicator means and yielding identity information about 
the correspondent node; 

determination means, responsive to the authentication means, for determining 
whether the address update process is to be performed; and 

address update means, responsive to the determination means, for carrying out the 
address update process. 
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